Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,197 total in npm · sorted newest first- Aug 14, 2025
Malicious code in project-eqvx1-victor (npm)
- Aug 14, 2025
Malicious code in project-eo6e1-raspberry (npm)
- Aug 14, 2025
Malicious code in project-emmpp-orange (npm)
- Aug 14, 2025
Malicious code in project-eldwl-zulu (npm)
- Aug 14, 2025
Malicious code in project-ek2cu-yam (npm)
- Aug 14, 2025
Malicious code in project-ej1ts-nectarine (npm)
- Aug 14, 2025
Malicious code in project-eidsx-banana (npm)
- Aug 14, 2025
Malicious code in project-eh7vv-yankee (npm)
- Aug 14, 2025
Malicious code in project-egtvg-hotel (npm)
- Aug 14, 2025
Malicious code in project-ef071-zulu (npm)
- Aug 14, 2025
Malicious code in project-eexrr-lima (npm)
- Aug 14, 2025
Malicious code in project-ebyob-hotel (npm)
- Aug 14, 2025
Malicious code in project-e9z12-yankee (npm)
- Aug 14, 2025
Malicious code in project-e925t-hotel (npm)
- Aug 14, 2025
Malicious code in project-e8ne8-oscar (npm)
- Aug 14, 2025
Malicious code in project-e7k2c-sierra (npm)
- Aug 14, 2025
Malicious code in project-e7i0t-juliet (npm)
- Aug 14, 2025
Malicious code in project-e40es-yam (npm)
- Aug 14, 2025
Malicious code in project-e3uh2-yam (npm)
- Aug 14, 2025
Malicious code in project-e2ec6-ugli (npm)
- Aug 14, 2025
Malicious code in project-e2c4s-yam (npm)
- Aug 14, 2025
Malicious code in project-e176x-juliet (npm)
- Aug 14, 2025
Malicious code in project-e0cb4-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-dyamz-raspberry (npm)
- Aug 14, 2025
Malicious code in project-dxgwi-lemon (npm)
- Aug 14, 2025
Malicious code in project-dwf9k-hotel (npm)
- Aug 14, 2025
Malicious code in project-dv4vf-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-dv31x-quebec (npm)
- Aug 14, 2025
Malicious code in project-dure7-romeo (npm)
- Aug 14, 2025
Malicious code in project-dskxm-mike (npm)
- Aug 14, 2025
Malicious code in project-drhnl-victor (npm)
- Aug 14, 2025
Malicious code in project-dpmzc-uniform (npm)
- Aug 14, 2025
Malicious code in project-dpbmt-victor (npm)
- Aug 14, 2025
Malicious code in project-dotjm-lima (npm)
- Aug 14, 2025
Malicious code in project-dnea5-yankee (npm)
- Aug 14, 2025
Malicious code in project-dmx65-india (npm)
- Aug 14, 2025
Malicious code in project-dmpkr-alpha (npm)
- Aug 14, 2025
Malicious code in project-dhrec-tangerine (npm)
- Aug 14, 2025
Malicious code in project-dfxsm-charlie (npm)
- Aug 14, 2025
Malicious code in project-dcnvf-yam (npm)
- Aug 14, 2025
Malicious code in project-dclxa-nectarine (npm)
- Aug 14, 2025
Malicious code in project-dbpi8-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-dazfz-vanilla (npm)
- Aug 14, 2025
Malicious code in project-davoc-november (npm)
- Aug 14, 2025
Malicious code in project-d8qv3-papa (npm)
- Aug 14, 2025
Malicious code in project-d8m76-india (npm)
- Aug 14, 2025
Malicious code in project-d7j6m-hotel (npm)
- Aug 14, 2025
Malicious code in project-d5l7e-india (npm)
- Aug 14, 2025
Malicious code in project-d56rk-zucchini (npm)
- Aug 14, 2025
Malicious code in project-d3tzw-bravo (npm)
Page 5419 of 6,664